Annex 2

DATA PROCESSING ACTIVITIES WHICH TAKE NOT AN INTEGRAL PART OF THE GENERAL BUSINESS CONDITIONS PERTAINING TO PARCEL DELIVERY AND MANAGEMENT AND THE GENERAL BUSINESS CONDITIONS APPLICABLE TO GLS PARCEL SHOP CUSTOMERS

1. DATA PROCESSING FOR MARKETING PURPOSES

1.1. Data processing related to newsletters

Purpose of data processing: providing up-to-date information about the Controller’s activity

Legal basis of the data processing: Consent

Scope of personal data processed: name, e-mail address

Duration of data storage: until withdrawal of consent of the data subject (unsubscribing from newsletter)

2. DATA PROCESSING RELATED TO RECRUITMENT AND SELECTION

2.1. Data processing related to data of job applicants (non-operational workers)

Purpose of data processing: collecting applicants’ data (résumés, cover letters)

Legal basis of the data processing: Consent

Scope of personal data processed: name, place and date of birth, address, e-mail address, phone number, social media user account, education, previous employers, hobbies, language skills (serial number of language exam certificate), licences (driving, ECDL, etc.), marital status, job title, current employer, expected salary, recommendations

Duration of data storage: 6 months following the official written evaluation

2.2. Data processing related to data of job applicants (operational workers)

Purpose of data processing: collecting applicants’ data (personal identity documents)

Legal basis of the data processing: Consent

Scope of personal data processed: personal identity card, address card, social security identification number, tax identification number, phone number

Duration of data storage: 6 months following the official written evaluation

2.3. Data processing related to data of job applicants via headhunters

Purpose of data processing: evaluating the applicants

Legal basis of data processing: Legitimate interest of the Controller

Scope of personal data processed: place and date of birth, address, e-mail address, phone number, social media user account, education, previous employers, hobbies, language skills (serial number of language exam certificate), licenses (driving, ECDL, etc.), marital status, job title, current employer, expected salary, recommendations, expected time of starting work

Duration of data storage: 12 months following the official written evaluation

2.4. Data processing related to offer given to a selected employee

Purpose of data processing: informing the applicant

Legal basis of data processing: Legitimate interest of the Controller

Scope of personal data processed: name of selected employee, job to be filled, direct supervisor’s name, job, amount of remuneration, details of benefits package, planned date of start of work

Duration of data storage: 6 months following the official written selection

3. PROCESSING OF PERSONAL DATA THROUGH VIDEO DEVICES

Purpose of data processing: Observing buildings (HUB, office) of the Controller for security and quality assurance purposes

Legal basis of data processing: Legitimate interest of the Controller

Scope of personal data processed: Image of the data subject

Duration of data storage: 30 days

4. DATA PROCESSING RELATED TO ENTRY

Purpose of data processing: Observing buildings of the Controller for security purposes

Legal basis of data processing: Legitimate interest of the Controller

Scope of personal data processed: Name of the data subject

Duration of data storage: 30 days